Methods and systems for wireless local area network (WLAN)-based signaling network monitoring

ABSTRACT

Methods and systems for WLAN-based signaling network monitoring are disclosed. A signaling message is received at a network routing node. A message copy function on the network routing node copies the signaling message. The message copy function forwards the copied signaling message to a WLAN interface. The WLAN interface transmits the signaling message to an external network monitoring platform via a wireless local area network connection.

RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.10/937,930, filed Sep. 10, 2004, now U.S. Pat. No. 7,286,516, thedisclosure of which is incorporated herein by reference in its entirety.

TECHNICAL FIELD

The present invention relates to signaling network monitoring systems.More particularly, the present invention relates to methods and systemsfor WLAN-based signaling network monitoring.

BACKGROUND

Signaling network monitoring systems are commonly used to capturesignaling message data from nodes in a telecommunications network. Somenetwork monitoring systems are implemented as cards or circuit boardsthat plug into the nodes that they monitor. Other systems includesignaling link probes that copy signaling messages from SS7 signalinglinks. Still other network monitoring systems use a combination ofinternal and external message copy functions. FIG. 1 illustrates aconventional signaling network monitoring system that signaling messagecopy functionality within a signaling message routing node, such as asignal transfer point. In FIG. 1, STP 100 includes an internal MSU copyfunction 102 that copies messages from SS7 signaling links. MSU copyfunction 102 copies signaling messages sent or received on SS7 signalinglinks and forwards them to network monitoring processors 104 via wiredEthernet 106. Network monitoring platform 104 stores and forwards thesignaling message copies to one or more servers 108, 110, and 112. Inthe illustrated example, server 108 receives MSUs and formats the MSUsinto CDRs and TDRs, as required by other applications. Server 110 maygenerate alarms based on security events detected from CDRs receivedfrom server 108. Server 112 may generate bills based on CDRs generatedby server 108.

One problem with the system illustrated in FIG. 1 is that wiredconnections are required between MSU copy function 102, networkmonitoring platform 104, and servers 108, 110, and 112. Requiring wiredconnections between telecommunications network monitoring components isundesirable because installing physical wires in existingtelecommunications facilities increases the time and expense required toprovide network monitoring systems.

Another problem with conventional wire-based network monitoring systemsthat reside within a telecommunications network element is that suchsystems require a network interface card (NIC) in the telecommunicationsnetwork element frame for every predetermined number of link cards beingmonitored. In the example illustrated in FIG. 1, STP 100 may includemany link interface modules, depending on the number of SS7 or IPsignaling links that it serves. Each link interface module may includeits own MSU copy function implemented in software on the link interfacemodule. However, in order to connect to Ethernet 106, STP 100 includes anetwork monitoring transport card for every n link interface modules,where n is an integer that depends on the speeds of the links beingmonitored relative to the speed of the network monitoring LAN and theprocessing and storage capacity of the network monitoring transportcard. As the number of link interface modules increases, the number ofnetwork monitoring transport cards must also increase. As a result, thedesign illustrated in FIG. 1 is not scalable.

Accordingly, in light of these difficulties associated with conventionalnetwork monitoring systems, there exists a need for improved methods andsystems for transporting signaling message copies to a location wherethey can be processed.

SUMMARY

The present invention includes methods and systems for WLAN-basedsignaling network monitoring. According to one aspect of the invention,signaling messages are received at a signaling message routing node,such as a signal transfer point. The signaling messages are copied andtransmitted over a wireless local area network connection to a networkmonitoring platform. In one exemplary implementation, each linkinterface module may include a WLAN interface for transmitting thesignaling message copies to the network monitoring platform over a WLAN.The network monitoring platform receives the signaling message copiessent over the WLAN and stores the signaling message copies. The networkmonitoring platform may be accessible by various network monitoringapplications via the WLAN. The network monitoring applications mayobtain the message copies over the WLAN. Once the copies are received,the network monitoring applications may perform their various networkmonitoring functions, such as CDR generation, billing, fraud detection,etc. Providing network monitoring over a wireless local area networkinterface decreases the need for external wiring and reduces scalabilityproblems associated with the network monitoring systems in conventionalsignaling message routing platforms. By providing a WLAN interface oneach link interface module, there is no longer a need for a NIC carddedicated to routing signaling message copies to an external platform.

Accordingly, it is an object of the invention to provide methods andsystems for providing network monitoring functions at a signalingmessage routing node using a wireless local area network interface.

It is another object of the invention to provide a signaling messagerouting node with integrated MSU copying capabilities and improvedscalability.

Some of the objects of the invention having been stated hereinabove,other objects will become evident as the description proceeds when takenin connection with the accompanying drawings as best describedhereinbelow.

BRIEF DESCRIPTION OF THE DRAWINGS

Preferred embodiments of the invention will now be explained withreference to the accompanying drawings of which:

FIG. 1 is a block diagram of a conventional network monitoring system;

FIG. 2 is a block diagram of a WLAN-based signaling network monitoringsystem according to an embodiment of the present invention;

FIG. 3 is a block diagram of an STP with an integrated WLAN-basednetwork monitoring system according to an embodiment of the presentinvention;

FIG. 4 is a block diagram of a link interface module including a WLANinterface for network monitoring connections according to an embodimentof the present invention;

FIG. 5 is a block diagram of a data communications module including aWLAN interface for network monitoring connections according to anembodiment of the present invention;

FIG. 6 is a block diagram of a network monitoring transport cardincluding a WLAN interface according to an embodiment of the presentinvention;

FIG. 7 is a block diagram for an 802.11 interface suitable for use withembodiments of the present invention;

FIG. 8 is a block diagram of an 802.11 access point suitable for usewith embodiments of the present invention;

FIG. 9 is a MAC layer block diagram of an 802.11 interface suitable foruse with embodiments of the present invention;

FIG. 10 is a message flow diagram illustrating an exemplaryauthentication sequence suitable for use with embodiments of the presentinvention; and

FIG. 11 is a flow chart illustrating exemplary steps for communicatingcopied signaling messages from a signal transfer point to a networkmonitoring application via a WLAN according to an embodiment of thepresent invention.

DETAILED DESCRIPTION

In one exemplary implementation, components of a network monitoringsystem may be connected by a WLAN. FIG. 2 illustrates a networkmonitoring system for copying signaling messages sent or received by asignal transfer point and communicating the signaling message copies tonetwork monitoring applications via a WLAN. Referring to FIG. 2, signaltransfer point 200 may be configured to route SS7 signaling messagesover SS7 or IP links 202. STP 200 may also include an MSU copy function102 as described above with regard to FIG. 1. However, rather thanincluding an Ethernet NIC card for communicating message copies tonetwork monitoring applications 108, 110, and 112, STP 200 may include aWLAN interface 204 for communicating the MSUs copied from the SS7 or IPlinks 202 to downstream network monitoring applications. Accordingly,network monitoring platform 104 and network monitoring applications 108,110, and 112 may also include a WLAN interface 204 for communicatingwith STP 200 via its WLAN interface. A WLAN router/access point 206 mayroute signaling messages between network monitoring platform 104 and thevarious other components of the network monitoring system. In addition,WLAN routers/access point 206 may provide remote access to the networkmonitoring WLAN via Internet or Intranet 208. A remote networkmonitoring platform 210 may thus be capable of accessing any of theapplications in the network monitoring WLAN.

In addition to or instead of signaling message copy functions that areinternal to a network node, the system illustrated in FIG. 2 may includean external network monitoring shelf 212 that copies SS7 or IP signalingmessages from SS7 or IP links 202 using link probes 214. Networkmonitoring shelf 212 may also include a WLAN interface 204. An exemplarynetwork monitoring shelf suitable for use with embodiments of thepresent invention is the TekServer Platform available from Tekelec ofCalabasas, Calif.

In one exemplary implementation, WLAN interfaces 204 and message copyfunctions 102 in STP 200 may be located on signaling link interfacecards within STP 200. By providing WLAN transport capabilities on thelink interface cards, there is no longer a need for a NIC card dedicatedto routing message copies to an external network monitoring platform. Asa result, the scalability problem associated with conventional networkmonitoring systems that require internal NIC cards for eachpredetermined number of link interface cards is reduced.

FIG. 3 illustrates an exemplary internal architecture for signaltransfer point 200 and network monitoring platform 104 according to anembodiment of the present invention. Referring to FIG. 3, signaltransfer point 200 includes a plurality of link interface modules (LIMs)302 for sending and receiving SS7 messages over SS7 signaling links. STP200 also includes a plurality of data communications modules (DCMs) 304for sending and receiving SS7 signaling messages over IP signalinglinks. STP 200 may also optionally include one or more networkmonitoring transport cards 306. Network monitoring transport card 306may communicate copied signaling messages from STP 200 to an externalnetwork monitoring platform. LIMs 302, DCMs 304, and NMTC 306 areconnected to each other via a counter-rotating, dual-ring bus 308.

In the illustrated example, LIMs 302, DCMs 304, and optional NMTC 306each include a WLAN interface 204 for communicating copied signalingmessages to external network monitoring platform 104. External networkmonitoring platform 104 may also include a wireless local area networkinterface 204 for receiving messages transmitted from wireless localarea network interfaces 204 from within STP 200. Alternatively, networkmonitoring platform 104 may include a LAN interface for receiving themessage copies from an external WLAN device that communicates directlywith WLAN interfaces 204 within STP 200. For example, wirelessrouter/access point 206 may be connected to network monitoring platform104 via a LAN or a WLAN interface to route signaling messages andnetwork monitoring control messages between WLAN interfaces 204 withinSTP 200 and network monitoring platform 104.

Network monitoring platform also includes a plurality of networkmonitoring processors 310 for managing network monitoring connectionswith message copy functions 102 and message storage 312 for storing themessage copies. Network monitoring processors 310 may implement aSCTP/IP, TCP/IP and/or UDP/IP protocol stack for receiving the messagecopies from message copy functions 102. In addition, network monitoringprocessors 310 may implement a network monitoring transport protocol,which will be described in detail below. Message storage 312 comprisesmemory for storing received messages being monitored.

LIMs 302 and DCMs 304 may each include a message copy function 102 thatcopies signaling messages. Once a LIM or DCM has copied signalingmessages to be transmitted to network monitoring platform 104, that LIMrequests network monitoring service from network monitoring platform 104by sending a request via UDP broadcast to network monitoring platform104. The processor on network monitoring platform 104 provisioned tohandle message copies from the particular LIM responds to the request,and a TCP/IP or SCTP/IP connection may be set up between the requestingLIM and the responding processor in platform 104. Communication betweennetwork monitoring platform 104 and the requesting LIM or DCM may occurdirectly using their respective WLAN interfaces without the need for adedicated network monitoring NIC card within STP 200.

Wireless router/access point 206 may be any suitable type of router witha wireless local area network interface and IP forwarding functions.Exemplary wireless routers suitable for use with embodiments of thepresent invention include any of the 802.11x, 802.16x, or 802.20xwireless routers available from Netgear, Inc. or Cisco Systems, Inc.Wireless router/access point 206 may be connected to network monitoringplatform 104 via a wireless interface or a wireline interface, such as a100-base-T Ethernet interface. In an alternate implementation, wirelessroute/access point 206 may be integrated within network monitoringplatform 104. Using an internal or a stand-alone wireless router isintended to be within the scope of the invention.

As mentioned above, in the embodiment illustrated in FIG. 3, networkmonitoring transport card 306 is optional, because LIMs 302 and DCMs 304include there own wireless local area network interfaces 204. The needfor separate network monitoring transport cards is reduced. As a result,the scalability problem associated with conventional signal transferpoints that require separate network monitoring transport cards iseliminated. However, if LIMs 302 and DCMs 304 do not include wirelesslocal area network interfaces, network monitoring transport cards 306may include such interfaces to eliminate external wireline connectionsto network monitoring platform 104. Thus, STPs with wireless local areanetwork interfaces located on the link interface modules and/or onnetwork monitoring transport cards are intended to be within the scopeof the invention.

FIG. 4 is a block diagram illustrating an exemplary LIM card 302 havinga WLAN interface 204. Referring to FIG. 4, LIM card 302 includes an SS7level 1 and 2 function for performing error detection, error correction,and sequencing for sending and receiving SS7 messages over SS7 signalinglinks. An input/output buffer 402 stores incoming and outgoing signalingmessages before being either sent over the signaling links or processedby higher layers. A discrimination function 404 receives incoming SS7signaling messages and determines whether the signaling messages requireprocessing by STP 200 or whether the messages are destined for anexternal node. For messages destined for an external node,discrimination function 404 forwards the messages to routing function406. Routing function 406 routes the signaling messages based on MTPlayer 3 information in the signaling messages to the card or moduleassociated with the outbound signaling link. For messages destined forSTP 200, discrimination function 404 forwards these messages todistribution function 408. Distribution function 408 forwards thesemessages to the appropriate processing module within STP 200 for furtherprocessing.

For outbound messages, LIM 302 includes a congestion management function410 for receiving messages from bus 308 and performing SS7 congestionmanagement procedures. These procedures may include determining whetheran outbound link is congested and only sending signaling messages overthe link if the priority of the messages is greater than the currentcongestion level. Congestion management function 410 forwards outboundmessages that are to be transmitted over the outbound signaling link toI/O buffer 402. SS7 level 1 and 2 functions 400 then insert theappropriate SS7 level 1 and 2 header information in the messages andforward the messages over the outbound signaling link.

Message copy function 102 copies both inbound and outbound messages fromI/O buffer 402. Message copy function 102 also requests service from theone of the processors in network monitoring platform 104 when messagecopy function 102 has message copies to send. Requesting service mayinclude broadcasting a service request via UDP to network monitoringplatform 102. One of the network monitoring processors in platform 104may respond to the service request via a service acceptance message.Once the network monitoring service request has been accepted, therequesting message copy function 102 encapsulates copied signalingmessages in a network monitoring packet that includes a headeridentifying the signaling link on which the message was received and apayload that carries the signaling message copy or copies. This networkmonitoring protocol for transmitting signaling messages from a messagecopy function to a network monitoring processor is described in furtherdetail in commonly-assigned, co-pending U.S. patent application Ser. No.10/154,309 filed May 23, 2002, the disclosure of which is incorporatedherein by reference in its entirety.

In embodiments in which STP 200 includes a dedicated NIC card forcommunicating message copies to network monitoring platform 104, messagecopy function 102 may simply forward the messages to the networkmonitoring platform and WLAN interface 204 on LIM card 302 may beomitted. In the illustrated embodiment, it is assumed that a centralizedNIC card is not present and that network monitoring connection manager410 implements TCP/IP, UDP/IP, or suitable transport and network layerprotocol for delivering message copies directly to network monitoringplatform 104. WLAN interface 204 implements layers 1 and 2 of a WLANprotocol for delivering the messages to network monitoring platform 104via a WLAN.

FIG. 5 is a block diagram illustrating an exemplary DCM card including aWLAN interface according to an embodiment of the present invention.Referring to FIG. 5, DCM card includes an Ethernet interface 500 forsending and receiving signaling messages over IP links using theEthernet protocol. Network layer 502 implements network layer functions,such as packet forwarding and routing. Network layer 502 may beimplemented using Internet protocol. Transport layer 504 managesassociations or connections with other signaling nodes. Transport layer504 may be implemented using the stream control transmission protocol(SCTP) or transmission control protocol (TCP). SS7 adaptation layer 506includes functionality for sending and receiving SS7 signaling messagesover IP signaling links. SS7 adaptation layer 506 may be implementedusing TALI, M3UA, M2PA, SUA, as described in the correspondingly-namedIETF Internet drafts and RFCs, or any other suitable SS7 adaptationlayer protocol. I/O buffer 402, discrimination function 404, routingfunction 406, distribution function 408, and congestion managementfunction 410 perform the same functions as their counterparts on LIMcard 302. Hence, a description thereof will not be repeated herein.

Similarly, DCM 304 includes message copy function 102 for copyinginbound and outbound signaling messages from I/O buffer 402 and forrequesting network monitoring service from platform 104. Networkmonitoring connection manager 412 implements the transport and networklayers of the network monitoring protocol stack used to deliver themessage copies to platform 104. WLAN interface 204 communicates themessage copies to platform 104 via a WLAN.

In embodiments in which each LIM and DCM card does not include a WLANinterface, WLAN interface 204 and network monitoring connection manager412 may be located on network monitoring transport card 306. Althoughthis embodiment is less scalable, it nonetheless eliminates the need forexternal network monitoring cables. FIG. 6 illustrates an exemplaryarchitecture for a network monitoring transport card including a WLANinterface according to an embodiment of the present invention. Referringto FIG. 6, network monitoring transport card 306 includes a businterface 600 for sending and receiving messages via bus 308. Acommunications processor 602 controls communications over bus 308.Application processor 604 runs network monitoring applications, such asnetwork monitoring connection manager 412. Network monitoring connectionmanager 412 implements the network and transport layers of the protocolstack for communicating message copies to network monitoring platform104.

In operation, network monitoring transport card 306 receives messagescopied from the link interface module via bus 600. Communicationsprocessor 602 forwards the messages to application processor 604.Application processor 604 stores message copies 608 in memory. Networkmonitoring connection manager 412 forwards the messages to networkmonitoring platform 104 via WLAN interface 204. Thus, even in thecentralized implementation, network monitoring transport card 306reduces the need for wired network monitoring connections at a signalingmessage routing node. However, this embodiment is less scalable in theembodiment described above where each interface module includes its ownWLAN interface 204.

802.11 Criteria

In one exemplary implementation, WLAN interfaces 204 may implement oneof the 802.11 family of protocols. In such implementation, each WLANinterface may conform to an established 802.11 network topology known asInfrastructure where each device in the basic service set, BSS, willcommunicate to the access point, i.e., the control unit, and the accesspoint will communicate with each node in the network, i.e. servers,and/or the outside world, i.e., a user's workstation. This type ofnetwork allows for maximum configurations and flexibility and will allowa high degree of integrity by allowing the access point to controlingress to the network. Thus, in the exemplary WLAN illustrated in FIG.2, message copies may be communicated among the various nodes using WLANrouter/access point 206.

The 802.11 protocol specification provides a number of MAC layer andhigher methods of security, Wireless Equivalent Privacy, WEP, being onethat also provides the feature shared access key that allows onlyauthorized stations access to the network. Encryption is also providedvia the WEP protocol so data transmitted from network monitoring 104platform to an application server can be encrypted as well. Thus, thenodes illustrated in FIG. 2 may utilize WEP authentication andencryption to securely communicate copied signaling messages over theWLAN.

802.11 Interface

In some new microprocessor implementations, the 802.11 interface is anon-chip component of a microprocessor. For example, some of the Pentium®family of microprocessors available from Intel Corporation include aninterface referred to as the Centrino® interface. The Centrino®interface is an 802.11b transceiver. FIG. 7 is a block diagram anembedded 802.11 interface suitable for use with embodiments of thepresent invention. A microprocessor with an embedded 802.11 interfacemay be used on any of the LIMs, DCMs, and/or NMTC cards illustrated inFIG. 3 to communicate signaling messages to a network monitoringplatform over a wireless interface. Alternatively, WLAN interfaces 204may be implemented using a stand-alone WLAN chipset.

FIG. 7 is a block diagram of an exemplary 802.11 network interfacesuitable for use as WLAN interface 204. Referring to FIG. 7, WLANinterface 204 includes configuration storage 700 for storing WLANinterface configuration information, such as the MAC address and versionused by the interface. Host interface 702 interfaces with the hostprocessor, such as the application processor on LIMs 302 and DCM 304.RAM packet buffer 704 stores packets received from the radio interfaceand packets to be sent to the radio interface. For example, RAM packetbuffer 704 may buffer MSU copies to be transmitted to network monitoringplatform 704. DMA engine 706 allows processors to directly accesspackets stored in packet buffer memory 704. MAC protocol block 708performs MAC layer functions, such as carrier sense multiple access withcollision detect and collision avoidance. For example, MAC protocolblock 708 may repeatedly send a test message, referred to as a ready tosend (RTS) message, before sending any MSU copies to network monitoringplatform 104. If network monitoring platform 104 returns a clear to sendmessage, then MAC protocol block 708 may begin transmission of messagecopies. If a clear to send message is not received, MAC protocol block708 may wait a predetermined time period before retrying the ready tosend message. Any other devices that detect the clear to send willrecognize that another device is transmitting and will allow that signalto leave uncontested.

MAC management block 710 manages overall MAC protocol operations. Packetheader generation block 712 generates packet headers for MAC frames.Radio control block 714 controls the sending and receiving of packetsvia radio interface 714. Modem 716 modulates a carrier with the packetdata to be sent using any suitable modulation scheme. If 802.11 isimplemented, modem 716 may implement orthogonal frequency divisionmultiplexing. The operating frequency implemented by radio interface 714may be any suitable free frequency. If 802.11b is implemented, theoperating frequency is 2.4 GHz. If 802.11a is implemented, the frequencyrange may be any frequency between 5.15 and 5.825 GHz.

As stated above, wireless router/access point 206 may include a WLANinterface for sending and receiving signaling messages and a wiredEthernet interface for communicating signaling message copies to networkmonitoring platform 104. In the 802.11 standard, the interface thatconverts from the WLAN protocol to a wired LAN protocol is referred toas an access point. FIG. 8 is a block diagram of an exemplary accesspoint circuit suitable for use with embodiments of the presentinvention. Referring to FIG. 8, wireless router/access point 206includes an Ethernet transceiver 800 for communicating with networkmonitoring platform 104 via a wired Ethernet connection. Wirelessrouter/access point 206 may also include a USB transceiver 802 forcommunicating with network monitoring platform 104 via a USB interface.Ethernet MAC block 804 implements 10/100-base-T Ethernet MAC layerfunctions. Similarly, USB device controller 806 controls USB transceiverand sends and receives messages via the USB interface.

On the radio side, access point may include an 802.11 MAC block 808 thatperforms 802.11 MAC functions and 802.11 transceiver 810 that sends andreceives signaling messages via an 802.11 interface. Memory controller812 controls access to memory 814. For example, memory controller 812may allow reads and writes of signaling messages to memory 814. Wirelessrouter/access point 206 may include an IP router 818 for routingsignaling message copies among the various nodes illustrated in FIG. 2via the LAN or the WLAN interface.

FIG. 9 is a block diagram illustrating 802.11 MAC layer 808 in moredetail. Referring to FIG. 9, MAC layer 808 includes a physical layerinterface 900 for sending a bit stream to modem 902. Radio controlinterface 904 controls frequency hopping and direct sequence spreadspectrum communications via radio interface 902. MAC protocol controller906 controls the overall operation of MAC block 808. WEP engine/RC4algorithm 908 performs encryption and authentication for securecommunications over the WLAN. Processing interface 910 provides anexternal control interface to processor 912. Processor 912 may be thehost system processor. In embodiments of the present invention,processor 912 may be a processor of network monitoring platform 104 orof STP 200. PC card and host interface 914 allows MAC block 908 toconnect directly to the bus of a host computer. USB host interface 916communicates with USB device controller 806 using the USB protocol.Clock generator and DLLs 918 generate clocks and provide DLLs used todynamically update software being executed by MAC block 808.

According to an important aspect of the invention, signaling messagecopies sent over the WLAN interface are preferably sent in a securemanner. As illustrated in FIG. 9, one security feature provided by the802.11 family of protocols is the WEP protocol. FIG. 10 is a messageflow diagram illustrating an exemplary authentication sequence that maybe performed by one of the WLAN interfaces in STP 200 and acorresponding interface in platform 104 according to an embodiment ofthe present invention. Referring to FIG. 10, a WLAN interface of STP 200requests 802.11 service by sending an authentication frame to acorresponding interface in network monitoring platform 104. In line 2 ofthe message flow diagram, when the WLAN interface in network monitoringplatform 104 receives the authentication frame, the interface replieswith an authentication frame including challenge information. In line 3of the message flow diagram, the requesting WLAN interface in STP 200encrypts the text in the challenge frame with a shared key using the WEPservice and sends the frame to the corresponding transceiver in networkmonitoring platform 104. In line 4 of the message flow diagram, the WLANinterface of platform 104 decrypts the text using the same shared keyand compares it to the challenge text sent earlier. If the text matches,the WLAN interface of platform 104 replies with the authenticationacknowledgement. If not, a negative acknowledgement may be sent.

Once the authentication sequence in FIG. 10 is complete, securecommunications between the WLAN interfaces in STP 200 and in networkmonitoring platform 104 can occur. For example, because authenticationis required, the likelihood of successful masquerading is reduced. Inaddition, messages can be encrypted using the RC4 algorithm and a sharedencrypted key. Secure communications may be important because signalingmessage copies may include information that can be used to threaten thesecurity of the signaling network. In addition, signaling messagesinclude billing information that could be intercepted or falsified.

FIG. 11 is a flow chart illustrating exemplary overall steps performedby a WLAN-based network monitoring system according to an embodiment ofthe present invention. Referring to FIG. 11, in step 1100, signalingmessages are copied from SS7 and IP signaling links. This step may beperformed by message copy functions 102 located on the LIM and DCM cardsillustrated in FIG. 3. In addition, or alternatively, this function maybe performed by network monitoring shelf 212 illustrated in FIG. 2. Instep 1102, secure WLAN channels are established with network monitoringplatform 104. This step may involve exchanging the WEP authenticationmessages illustrated in FIG. 10.

In step 1104, a network monitoring connection is established with anetwork monitoring platform. This step may be performed by message copyfunctions 102 and network monitoring connection managers 412 illustratedin FIGS. 4-6. More particularly, message copy functions 102 may sendnetwork monitoring service request messages over the protocol stackimplemented by network monitoring connection managers 412. Networkmonitoring processors located on network monitoring platform 104 mayrespond to the service request by accepting the connection. Once aconnection is accepted, the message copy functions may send signalingmessage copies to the network monitoring platform via the WLAN, asindicated by step 1106.

In step 1108, network monitoring platform 104 stores signaling messagecopies. In step 1110, network monitoring platform 104 distributessignaling message copies to network monitoring applications via theWLAN. This step may be performed by establishing secure connections withthe network monitoring applications. In one implementation, networkmonitoring platform 104 may deliver the message copies to CDR generationserver 108. CDR generation server 108 may generate application specificCDRs from the signaling message copies (step 1112). In step 1114, CDRgeneration server may distribute the application specific CDRs to thevarious applications via the WLAN.

Although in the examples described above, signaling message copies aredistributed among the various nodes of the network monitoring systemillustrated in FIG. 2, the present invention is not limited to sendingentire message copies via the WLAN. In an alternate implementation,signaling message parameters that are of interest to the various networkmonitoring applications may be transmitted among the various networkmonitoring nodes illustrated in FIG. 2. Thus, transmitting all or partof the signaling messages via a WLAN is intended to be within the scopeof the invention.

Thus, the present invention includes methods and systems forcommunicating signaling message copies to network monitoringapplications via a WLAN. Because a WLAN is used, network monitoringplatforms can be more easily installed in existing telecommunicationssignaling sites. In addition, in one exemplary implementation, WLANinterfaces are located on the link interface modules. Such animplementation provides increases scalability over conventional networkmonitoring applications where a single NIC controlled network monitoringcommunications for a plurality of link interface modules.

It will be understood that various details of the invention may bechanged without departing from the scope of the invention. Furthermore,the foregoing description is for the purpose of illustration only, andnot for the purpose of limitation, as the invention is defined by theclaims as set forth hereinafter.

1. A method for monitoring signaling message traffic in atelecommunications network, the method comprising: (a) receiving asignaling message at a network routing node; (b) generating a copy atleast a portion of the signaling message; (c) transmitting the copy to anetwork monitoring platform via a wireless communication link using awireless local area network (WLAN) protocol; and (d) routing thereceived signaling message to a signaling node via a wireline signalinglink.
 2. The method of claim 1 wherein receiving the signaling messageincludes receiving the signaling message at a signaling link interfacemodule located in the routing node.
 3. The method of claim 2 whereingenerating the copy includes generating the message copy on thesignaling link interface module.
 4. The method of claim 3 whereintransmitting the copy includes transmitting the message copy using aWLAN interface located on the signaling link interface module.
 5. Themethod of claim 2 wherein transmitting the copy includes transmittingthe message copy using a WLAN interface separate from the signaling linkinterface module.
 6. The method of claim 1 generating the copy includesusing link probes and a shelf external to the network routing node. 7.The method of claim 6 wherein transmitting the copy to the networkmonitoring platform includes transmitting the copy to the networkmonitoring platform using a WLAN interface located on the networkmonitoring shelf.
 8. The method of claim 1 wherein transmitting the copyto the network monitoring platform includes forwarding the copy to aWLAN router/access point and wherein the WLAN router/access pointforwards the copy to the network monitoring platform.
 9. The method ofclaim 1 wherein transmitting the copy to the network monitoring platformincludes establishing a secure connection with the network monitoringplatform prior to transmitting the copy via the WLAN.
 10. The method ofclaim 9 wherein establishing the secure connection includes performingan authentication sequence with the network monitoring platform.
 11. Themethod of claim 9 wherein establishing the secure connection includesencrypting the message copied prior to sending the message copy over theWLAN.
 12. The method of claim 1 wherein performing steps (a)-(c)includes performing steps (a)-(c) at a signal transfer point.
 13. Themethod of claim 1 wherein the WLAN protocol includes an 802.11xprotocol.
 14. The method of claim 1 wherein the WLAN protocol includesat least one 802.16 protocol layer.
 15. The method of claim 1 whereinthe WLAN protocol includes at least one 802.20 protocol layer.
 16. Themethod of claim 1 including transmitting the copy from the networkmonitoring platform to a network monitoring application.
 17. The methodof claim 16 wherein transmitting the copy from the network monitoringplatform to the network monitoring application includes transmitting thecopy via the WLAN.
 18. The method of claim 1 wherein the signalingmessage comprises an SS7 signaling message.
 19. A system for monitoringsignaling message traffic in a telecommunications network, the systemcomprising: (a) a network node for receiving a signaling message androuting the received signaling message to a signaling node via awireline signaling link, the network node including a message copyfunction for copying at least a portion of the received signalingmessage and a first wireless local area network (WLAN) interface fortransmitting the copy using a WLAN protocol; and (b) a networkmonitoring platform operatively associated with the network node andincluding a second WLAN interface for receiving the copy and memory forstoring the copy transmitted by the network node.
 20. The system ofclaim 19 wherein the network node comprises a signal transfer pointincluding a link interface module, wherein the message copy function islocated on the link interface module.
 21. The system of claim 20 whereinthe first WLAN interface is located on the link interface module fortransmitting messages copied by the link interface module.
 22. Thesystem of claim 20 wherein the signal transfer point includes a networkmonitoring transport card for receiving messages copied by the messagecopy function and wherein the first WLAN interface is located on thenetwork monitoring transport card.
 23. The system of claim 19 whereinthe network monitoring platform includes an access point and wherein thesecond WLAN interface is associated with the access point.
 24. Thesystem of claim 19 wherein the WLAN protocol includes an 802.11xprotocol layer.
 25. The system of claim 19 wherein the WLAN protocolincludes at least one 802.16 protocol layer.
 26. The system of claim 19wherein the wireless LAN protocol includes at least one 802.20 protocollayer.
 27. The system of claim 19 wherein the network node comprises anetwork monitoring shelf for copying signaling messages from signalinglinks external to a network routing node.
 28. The system of claim 19wherein the first and second WLAN interfaces are adapted to perform anauthentication sequence prior to transmission of the message copy. 29.The system of claim 19 wherein the first WLAN interface is adapted toencrypt the copy prior to sending a message copy to the second WLANinterface.
 30. The system of claim 19 wherein the signaling messagecomprises an SS7 signaling message.
 31. A network routing node formonitoring signaling message traffic in a telecommunications network,the network routing node comprising: (a) a signaling link interfacemodule for receiving a signaling message; (b) a message copy functionoperatively associated with the signaling link interface module forcreating a copy of at least a portion of the received signaling message;and (c) a WLAN interface operatively associated with the signaling linkinterface module for transmitting the copy to an external receiver usinga WLAN protocol, wherein the network routing node routes the receivedsignaling message to a signaling node via a wireline signaling link. 32.The network routing node of claim 31 wherein the signaling linkinterface module, the message copy function, and the WLAN interface arecomponents of a signal transfer point.
 33. The network routing node ofclaim 31 wherein the WLAN interface comprises an 802.11x interface. 34.The network routing node of claim 31 wherein the WLAN interface comprisean 802.16 interface.
 35. The network routing node of claim 31 whereinthe WLAN interface comprises an 802.20 interface.
 36. The networkrouting node of claim 31 wherein the message copy function resides onthe signaling link interface module.
 37. The network routing node ofclaim 36 wherein the WLAN interface resides on the signaling linkinterface module.
 38. The network routing node of claim 36 comprising anetwork monitoring transport card operatively associated with thesignaling link interface module, wherein the WLAN interface resides onthe network monitoring transport card and is adapted to receive the copyfrom the message copy function.
 39. The network routing node of claim 31wherein the signaling message comprises an SS7 signaling message.
 40. Asystem for monitoring signaling message traffic in a telecommunicationsnetwork, the system comprising: (a) a network node for receiving asignaling message and routing the received signaling message to asignaling node via a wireline signaling link, the network node includinga message copy function for copying at least a portion of a receivedsignaling message and a wireless local area network (WLAN) interface fortransmitting the copy using a WLAN protocol; (b) a wirelessrouter/access point having a WLAN interface and a wired LAN interface,wherein the WLAN interface is adapted to receive the message copy from awireless LAN and the wired LAN interface is adapted to transmit themessage copy over a wired LAN; and (c) a network monitoring platform forreceiving the message copy from the wireless router/access point via thewired LAN.
 41. A network routing node for monitoring signaling messagetraffic in a telecommunications network, the network routing nodecomprising: (a) a plurality of signaling link interface modules forsending and receiving signaling messages; (b) a plurality of messagecopy functions operatively associated with the signaling link interfacemodules for copying signaling messages sent or received by the signalinglink interface modules; and (c) a plurality of WLAN interfaces, eachWLAN interface being associated with one of the signaling link interfacemodules for transmitting messages copied by the message copy functionsto an external receiver using a WLAN protocol, wherein the networkrouting node routes the received signaling messages to signaling nodesvia wireline signaling links.